Support Auth Tab

[ntsk]

Feature Request

Motivation

Chrome’s Auth Tab enhances authentication flows by:

• Improved security: Uses a direct callback API instead of intent-based result delivery, reducing the risk of intent-interception and tampering.
• Streamlined UI: Strips away extraneous browser controls (e.g., menu items, long-press actions), allowing users to focus solely on authentication.
• Simplified integration: Eliminates the need for Android manifest intent-filters and additional boilerplate, as the Auth Tab API handles result callbacks automatically.

https://developer.chrome.com/docs/android/custom-tabs/guide-auth-tab

Description

We’ll migrate to Auth Tab as described in the Implement Auth Tab section of the guide. On devices that don’t support Auth Tab, it will automatically fall back to the existing Custom Tab implementation.

[svenjacobs]

Hello! I just wanted to share that Lokksmith, my Kotlin Multiplatform OIDC library, now supports Auth Tab as of version 0.4.0.

I wouldn't usually promote my own solution in the issues section of another library, but since AppAuth hasn’t seen a new release since 2021, it’s fair to assume the project is no longer actively maintained. That is actually the main reason why I created Lokksmith in the first place.